What Every MSP Needs to Know About CMMC (feat. Matt Travis, CEO of Cyber AB)

In this special episode of Climbing Mount CMMC, Bobby and Kaleigh discuss the intricacies of the CMMC ecosystem with Matt Travis, CEO of the Cyber AB. They explore the challenges, opportunities, and future strategies for MSPs, assessors, and small businesses navigating cybersecurity compliance.32 CFR Final Rule: 2024-22905.pdfCyber AB Website: CyberAB > HomeTime Stamps:00:00-02:14 Introduction02:15-04:03 What Is the Cyber AB?04:04-09:27 Surviving the Early CMMC Years09:28-12:26 CMMC Momentum Is Growing12:27-16:13 Can the Ecosystem Scale?16:14-21:47 How the DoD Will Manage Rollout Challenges21:48-27:50 The MSP Capacity Problem27:51-33:24 Why MSPs Are Essential to CMMC33:25-35:43 New Support for MSPs & Contractors35:44-39:54 Creating a CMMC Body of Knowledge39:55-44:00 Policing the Ecosystem & Preventing Abuse44:01-47:40 The Future of CAICO Under ISACA47:41-49:29 ConclusionWebsite: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Bobby and Kaleigh provide an in-depth look at the CCP and CCA certifications, including preparation strategies, course insights, and industry perspectives. They discuss topics that target those aiming to understand the certification process, improve their skills, or help organizations prepare for assessments.Tara Lemieux Game: SECTOR 171 — The Assessor's GauntletISACA info: CMMC: Provisional Instructor (PI) to CMMC Credentialed Instructor (CCI) Transition OverviewCMMC: How can I transition from Active Provisional Instructor (PI) to CMMC Credentialed Instructor (CCI)?Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this Spelunking episode of Climbing Mount CMMC, Kaleigh and Adams dive into the key differences between NIST 800-171 Rev2 and Rev3, focusing on incident response requirements for CMMC compliance. They share insights on preparing for Rev3, emphasizing 03.06's incident handling, reporting, and training strategies.Link to NIST 800-171 Rev 3: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r3.pdfWebsite: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Bobby and Kaleigh explore the recent updates and implications of "significant changes" in the CMMC assessment process, focusing on how organizations can navigate reassessments, change management, and the role of C3PAOs.Link to 32 CFR Final Rule: Federal Register :: Cybersecurity Maturity Model Certification (CMMC) ProgramLink to FAQ: CYBERSECURITY MATURITY MODEL CERTIFICATION Program (CMMC) FREQUENTLY ASKED QUESTIONSLink to Vince Scott's Article: (29) Temporary Deficiencies, Enduring Exceptions, and Operational Plans of Action: What are they and why do I care? | LinkedInWebsite: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Kaleigh speaks with Axiom's compliance officer, Adam Evans, to explore the complexities of inheritance in the context of CMMC compliance, cloud service providers, and external service providers. They discuss how inheritance works, common misconceptions, and practical tips for organizations navigating compliance assessments.Link to the CMMC Assessment Process (CAP): https://cyberab.org/Portals/0/CMMC%20Assessment%20Process%20v2.0.pdfWebsite: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Kaleigh and Bobby dive into a deep discussion on the complexities and challenges of achieving CMMC Level 2 certification for MSPs and OSCs with Lawrence Cruciana. They share insights on shared responsibility, operational maturity, and "the game of chicken" played between organizations in the cybersecurity compliance landscape.Lawrence's LinkedIn:  Lawrence Cruciana | LinkedInCorporate Information Technologies Website: Corporate Information Technologies - CorpInfoTechWebsite: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Cyb-Her, Kaleigh shares with Axiom employee, Maleah Adams, her journey from call coordinator to COO, speaking on her experiences in the MSP and cybersecurity space, including her work and transition to the CMMC ecosystem and her perspective as a woman in a male-dominated industry.Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode of Climbing Mount CMMC, Fernando Machado (CCA) from CyberSec Investments shares his extensive experience with Kaleigh and Bobby about the CMMC assessment process, the journey to becoming a C3PAO, and practical insights for contractors navigating the certification landscape. They discuss the phases of assessments, scoping mistakes, and how to prepare effectively.Fernando's LinkedIn: https://www.linkedin.com/in/fernando-machado-cissp-cism-cca-ccp-5b5581124/CyberSec Investments Website: https://cybersecinvestments.com/ ND-ISAC C3PAO Shopping Guide:  https://ndisac.org/defense-news/nd-isac-releases-c3pao-shopping-guide-for-small-medium-sized-businesses/Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this episode, Kaleigh and, new to Axiom, Ashton Guerra discuss the critical questions organizations seeking CMMC Level 2 certification (OSCs) should ask their MSPs. They share insights on scope, security measures, and the importance of transparency in the certification journey.Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/

In this new series we like to call "Spelunking", Bobby and Kaleigh explore the updates in NIST 800-171 Revision 3, focusing on the differences from Rev 2, including control changes, assessment objectives, and preparation strategies for compliance. In this episode, they focus on control 03.02 Awareness and Training. They give valuable insights for MSPs, organizations, and assessors preparing for the upcoming changes and requirements.Website: https://www.axiom.tech/YouTube: https://www.youtube.com/channel/UCaJagoDasNG3MqLqw2Af_ZQAxiom's LinkedIn: https://www.linkedin.com/company/axiomtech/Bobby's LinkedIn: https://www.linkedin.com/in/bobbyguerra/Kaleigh's LinkedIn: https://www.linkedin.com/in/kaleigh-floyd-079a52190/